In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference

During XSK TX queue teardown, outstanding descriptors are completed
without a CQE. If one requested a TX timestamp, the completion path
passes that NULL CQE to mlx5e_xsk_fill_timestamp(), which dereferences
it.

Return zero when no CQE is available, indicating that teardown did not
produce a TX timestamp.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00168.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
ec706a860eba99bf934d59f74b5db90af44e882e affected < fce70b6bf9f3261e887419a4e7caa25b80fa9d55
ec706a860eba99bf934d59f74b5db90af44e882e affected < f81d40e2eb69552334f510114f3e6edd0d43178b
ec706a860eba99bf934d59f74b5db90af44e882e affected < 63df0ef4c6e3105589e6bb2e758ce611b0ada86c
ec706a860eba99bf934d59f74b5db90af44e882e affected < 7b97273cbebe9dd4fddc457f0c4f2a124d0e3996
Linux Linux affected
Version Status Constraints
6.8 affected —
0 unaffected < 6.8
6.12.113 unaffected ≤ 6.12.*
6.18.56 unaffected ≤ 6.18.*
7.2.10 unaffected ≤ 7.2.*
7.3 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/63df0ef4c6e3105589e6bb2e758ce611b0ada86c cve-icon cve-icon
https://git.kernel.org/stable/c/7b97273cbebe9dd4fddc457f0c4f2a124d0e3996 cve-icon cve-icon
https://git.kernel.org/stable/c/f81d40e2eb69552334f510114f3e6edd0d43178b cve-icon cve-icon
https://git.kernel.org/stable/c/fce70b6bf9f3261e887419a4e7caa25b80fa9d55 cve-icon cve-icon
History

Sun, 18 Oct 2026 22:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476

Sun, 18 Oct 2026 16:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference During XSK TX queue teardown, outstanding descriptors are completed without a CQE. If one requested a TX timestamp, the completion path passes that NULL CQE to mlx5e_xsk_fill_timestamp(), which dereferences it. Return zero when no CQE is available, indicating that teardown did not produce a TX timestamp.
Title net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-19T09:25:44.148Z

Reserved: 2026-09-25T10:25:14.370Z

Link: CVE-2026-98791

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-18T16:17:33.087

Modified: 2026-10-19T10:19:43.137

Link: CVE-2026-98791

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-19T13:06:15Z

Weaknesses